Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How do I completely disable POP3 in WHM?

Discussion in 'E-mail Discussions' started by Vatoloco, Jan 25, 2011.

  1. Vatoloco

    Vatoloco Well-Known Member

    Joined:
    Jun 21, 2004
    Messages:
    100
    Likes Received:
    0
    Trophy Points:
    166
    I'm not using IMAP or POP3 because I've switched my e-mail to Google Apps.

    In WHM, I've went to Main >> Service Configuration >> Mailserver Selection and set it to Disabled. POP3 still seems to be active though because I'm getting e-mail notices about failed login attempts on pop3d almost every day.
     
    #1 Vatoloco, Jan 25, 2011
  2. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,622
    Likes Received:
    26
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Is anything still running on port 110?

    Code:
    lsof -i :110
netstat -an|grep :110
    You could firewall off the port (take it out of the firewall as an allowed port or block the port).

    For my machine, even though I have pop3d, it isn't in WHM > Service Manager. Now, I do have IMAP there to uncheck for enabled and monitor, but I don't have pop. While an /etc/chkserv.d/pop file exists (chkservd handles Service Manager restarts for a service), pop is not in the chkservd configuration file at /etc/chkserv.d/chkservd.conf location as a listed service.

    If anything is running on port 110, then the service is still running. If nothing is running on port 110, then simply block the port in the firewall.

    By the way, exactly how are you getting alerts for login attempts? What service is sending these - cPHulk Brute Force Protection or CSF / LFD or something else?
     
    #2 cPanelTristan, Jan 25, 2011
  3. Vatoloco

    Vatoloco Well-Known Member

    Joined:
    Jun 21, 2004
    Messages:
    100
    Likes Received:
    0
    Trophy Points:
    166
    Code:
    root@lotr [~]# lsof -i :110
COMMAND    PID USER   FD   TYPE DEVICE SIZE NODE NAME
couriertc 3763 root    3u  IPv4  10174       TCP *:pop3 (LISTEN)
    I also only have IMAP listed in the Service Manager and I've disabled it.

    CSF/LFD is what's letting me know about all the failed login attempts on pop3.

    I searched around and one suggestion to disable pop3 was to run /scripts/setupmailserver but it's already showing as disabled for me.

    Code:
    root@lotr [~]# /scripts/setupmailserver --current
Current mailserver type: disabled
Current storage format: maildir
     
    #3 Vatoloco, Jan 25, 2011
    Last edited: Jan 25, 2011
  4. Vatoloco

    Vatoloco Well-Known Member

    Joined:
    Jun 21, 2004
    Messages:
    100
    Likes Received:
    0
    Trophy Points:
    166
    Okay, I think I finally got it turned off. I ran:

    /scripts/setupmailserver --force disabled​

    And now "lsof -i :110" is returning nothing. :)
     
    #4 Vatoloco, Jan 25, 2011
  5. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,622
    Likes Received:
    26
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Great to hear. If that doesn't work, then you are using CSF and LFD, there's no point to have port 110 opened. You could remove it in WHM > Plugins > ConfigServer Security & Firewall area in the firewall configuration file.
     
    #5 cPanelTristan, Jan 25, 2011
(You must log in or sign up to post here.)
Loading...
Similar Threads - completely disable POP3
  1. Patrik

    SOLVED Disable Email section completely

    Patrik, Sep 26, 2017, in forum: General Discussion
    Replies:
    2
    Views:
    84
    Patrik
    Sep 26, 2017
  2. icandoit

    Disable Spamassasin Completely

    icandoit, May 31, 2016, in forum: E-mail Discussions
    Replies:
    1
    Views:
    694
    cPanelMichael
    Jun 3, 2016
  3. technonur

    disable sslv2 and v3 completely

    technonur, Nov 10, 2015, in forum: Security
    Replies:
    1
    Views:
    648
    cPanelMichael
    Nov 10, 2015
  4. sktest123

    Kill completely a running WHM browser session

    sktest123, Feb 13, 2017, in forum: Security
    Replies:
    11
    Views:
    736
    cPanelMichael
    Feb 21, 2017
  5. Spork Schivago

    SOLVED Completely remove attracta.

    Spork Schivago, Jan 19, 2017, in forum: Workarounds and Optimization
    Replies:
    12
    Views:
    759
    vlee
    May 22, 2017

Share This Page